Sectigo PositiveSSL

Sectigo PositiveSSL is the former Comodo Positive SSL, a simple certificate with flexible validation methods, using e-mail, DNS CNAME and HTTP/HTTPS.

This product is one of the only products we have found, that add a Critical attribute to the Basic Constraints CA:False parameter, which is required possibly due to a bug, by some versions of Cisco Firepower Management Center (FMC), Cisco Firepower 7000/8000 series. We therefore highly recommend using this product for your Cisco needs. The critical attribute is normally not needed on the Basic Constraints CA:False, therefore most CA's do not add it and there is no way to easily "add" it to their products.

If the certificate is ordered as www. first, the name without www. will automatically be added.

Note - Sectigo has changed root certificate the 2nd of June 2025.
All certificates issued from this date will be from the new root CA certificates and issued with SHA2-384 hashing algorithm.
For more information click here.